Cryptanalysis and Repair of "Decentralized Multi-Authority ABE for NC$^1$ from BDH"

We present a plaintext-recovery attack on the decentralized multi-authority attribute-based encryption construction of Datta, Komargodski, and Waters Journal of Cryptology, 2023. The attack succeeds in the claimed static model with one corrupt authority and two users whose individual attribute se...

Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232

Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232...

CVE-2023-49367

CVE-2023-49367 - Sensetive Data Exposure Sensetive Data Exposure in Kyocera Printer Web Panel Vendor: Kyocera Corporation Affected Versions: Command Center RX - EXOSYS M5521cdn Description After connecting to the Kyocera interface address book, test requests for smb and ftp can be seen in the sen...

PGP-client-checker-CVE-2021-33560

PGP client checker – CVE-2021-33560 This is a tool to check whether your OpenPGP client is affected by CVE-2021-33560. This vulnerability exposes to plaintext recovery the messages you encrypt to some ElGamal subkeys. The technical details of the vulnerability are described in this blog post and...

CVE-2023-30146

CVE-2023-30146 - Assmann/HooToo Webcam Exploit - Sensitive Data Exposure Description An issue was discovered in HooToo and Assmann branded IP-Cameras. The firmware stores the administrator and user credentials in the backup in plaintext. The backup can be retrieved and decompressed without...

Siemens SIMATIC S7-1500 TM MFP Plaintext Storage of a Password (CVE-2026-23303)

In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifssetcifscreds When debug logging is enabled, cifssetcifscreds logs the key payload and exposes the plaintext username and password. Remove the debug log to avoid exposing...

GO-2026-6748 Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access in code.vikunja.io/api

Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is...

aziot-cctv-cve-2025-50777

aziot-cctv-cve-2025-50777 CVE-2025-50777: Root Access and Plaintext Credential Exposure in AZIOT Smart CCTV Summary A local access control vulnerability CVE-2025-50777 has been identified in the firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera Firmware Version V1.00.02. Thi...

CVE-2022-39841

CVE-2022-39841 Medusa's leaky WebSocket For more information please read the blog post Summary A critical vulnerability in Medusa allows for information leakage, including plaintext credentials, by attaching to an unauthenticated WebSocket and waiting for a user to make a configuration change...

CVE-2023-23752-Docker

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023-23752 Dockerized Installation Recommended automatic 1. Clone this repo git clone https://github.com/karthikuj/CVE-2023-23752-Docker.git 2. Change directory cd CVE-2023-23752-Docker 3. Run ./setup.sh 4. Open your browser and go to...

CVE-2025-58443

CVE-2025-58443 exploit POC for https://github.com/FOGProject/fogproject which is authentication bypass leads to dump DB that include full DB dump, that include clear text password and users and admin password hash. vulnerable version : 1.5.10.1673 below a script that will exploit the vulnerabilit...

MicroburstSecretsHunter

MicroBurst Secrets Hunter A PowerShell scanner that combs through MicroBurst Get-AzDomainInfo output for plaintext passwords, keys, connection strings, and other secrets that should never sit unencrypted in an Azure environment. Built for read-only audit workflows : you collect a domain dump with...

wcw-cyberring-pav-decryptor

WCW CyberRing PAV Decryptor Cryptanalysis of a proprietary 1999 video DRM system, recovering 51 minutes of lost media through static binary analysis and known-plaintext attack. Frame from a recovered "CyberRing" match. WCW wrestlers were filmed against blue screen and composited into a CGI arena...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

CVE-2026-111704

LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext passwords, retrieve LLM provider API keys...

CVE-2026-111704 LangChat through commit 2a6285a Missing Authentication on REST API Controllers

LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext passwords, retrieve LLM provider API keys...

EUVD-2026-102996

LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext passwords, retrieve LLM provider API keys...

CVE-2026-111704 LangChat through commit 2a6285a Missing Authentication on REST API Controllers

LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext passwords, retrieve LLM provider API keys...

CVE-2026-111704

LangChat (through commit 2a6285a) is vulnerable to a missing authentication flaw because no Sa-Token interceptor is registered. This allows unauthenticated remote attackers to access REST controllers. Specifically, attackers can query /api/v1/auth/users to read plaintext passwords , retrieve LLM ...

CVE-2026-19864

A flaw was found in Eclipse Jetty. The session authentication mechanism retains user credentials in session objects, which can cause plaintext passwords to be written to persistent storage when authenticated sessions are saved. An attacker with read access to the persistent session data store can...